signature check fails doing yum update

Rick Thomas yellowdog-general@lists.terrasoftsolutions.com
Sun Jul 20 21:40:01 2003


"apt-get update && apt-get upgrade" is perfectly happy.  It does 
the update without a whimper.

Does "apt" not check signatures?  I can't find any mention of 
signatures in any of the apt man pages.  Where am I not looking?

Rick


On Sunday, July 20, 2003, at 11:00 PM, Rick Thomas wrote:

> And yet, I get
> ===================================================
>
> # rpm --checksig 
> /var/cache/yum/updates/packages/ethereal-0.9.13-1.90.1a.ppc.rpm
> /var/cache/yum/updates/packages/ethereal-0.9.13-1.90.1a.ppc.rpm: 
> (sha1) dsa sha1 md5 gpg OK
> #
>
> ===================================================
>
> Which would seem to indicate that rpm thinks that file is OK.
>
> Can somebody please give me a clue?
>
> Rick
>
> On Sunday, July 20, 2003, at 06:32 PM, Rick Thomas wrote:
>
>> ===================================================
>> # yum update
>> Gathering package information from servers
>> Getting headers from: Yellow Dog Linux 3.0 base
>> Getting headers from: Yellow Dog Linux 3.0 updates
>> Finding updated packages
>> Downloading needed headers
>> Resolving dependencies
>> Dependencies resolved
>> I will do the following:
>> [update: ethereal.ppc]
>> [update: nfs-utils.ppc]
>> Is this ok [y/N]: y
>> Getting ethereal-0.9.13-1.90.1a.ppc.rpm
>> Error: GPG Signature check failed for 
>> /var/cache/yum/updates/packages/ethereal-0.9.13-1.90.1a.ppc.rpm
>> You may want to run yum clean or remove the file:
>>  /var/cache/yum/updates/packages/ethereal-0.9.13-1.90.1a.ppc.rpm
>> You may also want to check to make sure you have the right gpg keys
>> Exiting.
>> #
>> ===================================================
>